Atomic-openshift (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2018-08-13. Vendor: Unknown.

CVEs of Atomic-openshift

• CVE-2017-15138 - CVSS 5 (medium), 2018-08-13: The OpenShift Enterprise cluster-read can access webhook tokens which would allow an attacker with sufficient privileges to view confidential webhook tokens.
• CVE-2017-15137 - CVSS 5.3 (medium), 2018-07-16: The OpenShift image import whitelist failed to enforce restrictions correctly when running commands such as "oc tag", for example. This could allow a user…
• CVE-2018-10885 - CVSS 7.5 (high), 2018-07-05: In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin.…